CVE-2016-3552: High severity oracle java se 7 vulnerability
Oracle Java SE 8u101 fixes an unspecified vulnerability in the Install component (CVE-2016-3552). Upstream has CVSS scored this issue as: 8.1/CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
External Reference:
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html#AppendixJAVA
Other sources
Unspecified vulnerability in Oracle Java SE 8u92 allows local users to affect confidentiality, integrity, and availability via vectors related to Install.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-3552?
CVE-2016-3552 has been scored as a severity of 8.1, indicating a high risk level.
How do I fix CVE-2016-3552?
To fix CVE-2016-3552, upgrade to Oracle Java SE version 1.8.0_101 or later.
What software is affected by CVE-2016-3552?
CVE-2016-3552 affects Oracle Java SE 8u101 and earlier versions.
Is CVE-2016-3552 a network vulnerability?
CVE-2016-3552 is classified as a local vulnerability that requires specific user interaction to exploit.
Does CVE-2016-3552 affect only Java Development Kit (JDK)?
CVE-2016-3552 affects both the Java Development Kit (JDK) and the Java Runtime Environment (JRE) versions 1.8.0 update 92 and earlier.